Re: Accepting expired client certificate

2022-02-23 Thread Martin Hicks
Hi Viktor, On Thu, 3 Feb 2022 at 14:07, Viktor Dukhovni wrote: > On Thu, Feb 03, 2022 at 01:39:44PM -0500, Martin Hicks wrote: > > > The only configuration change I made in response to this discussion was > > to disable smtpd_tls_ask_ccert - I'm not sure why this was eve

Re: Accepting expired client certificate

2022-02-03 Thread Martin Hicks
m ca-certificates. The only configuration change I made in response to this discussion was to disable smtpd_tls_ask_ccert - I'm not sure why this was ever enabled. I'll update in a week or two when I see another e-mail from aircanada. Thanks, mh -- Martin Hicks P.Eng.| m...@bork.org Bork Consulting Inc. | +1 (613) 266-2296

Accepting expired client certificate

2022-02-03 Thread Martin Hicks
f the certificate printed in the logs. I'm also not able to query the certificate from these servers using `openssl s_client`. Thanks, mh -- Martin Hicks P.Eng.| m...@bork.org Bork Consulting Inc. | +1 (613) 266-2296